According to the ICO report on the legislation I linked to, use of cookies needed to provide the user with a service they have requested is explicitly permitted. Likewise, if your use of the cookie does not violate privacy (i.e., you don't build up a user profile), it is OK.